Video Screencast Help

Would it be safe to exclude the MS Office directory

Created: 18 Jul 2013 • Updated: 19 Jul 2013 | 12 comments
This issue has been solved. See solution.

Program Files (x86)\Microsoft Office

I think it would help speed things up if it were not scanned.

Operating Systems:

Comments 12 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

You can exclude but it is not recommended for security reasons.

Do you feel that Microsoft Office folder is 100% secured?

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

.Brian's picture

I doubt it. I dont' think you will see much of a performance improvement here if you exclude that directory and it could pose a pretty significant risk.

What's going on to make you think you need to exclude?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

The Conquistador's picture

Outlook has been slow recently, and sometimes i can see OST files growing to 20GB. Doubt it's related, but was curious.

.Brian's picture

SEP should've added the necessary exclusions when installed on Exchange:

http://www.symantec.com/docs/TECH102400

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SOLUTION
Michael_Dexter's picture

Hello,

I wouldn't have done those exclusions, if I would have been you.

In today's world of targeted virus, Hackers and Virus developers are using places to hide these virus files we could not even think of. You are simply creating a security hole by creating a exception.

 

Mithun Sanghavi's picture

Hello,

I don't think those are related. Secondly, do you have any protection for your exchange?

I would recommend you to install Symantec Mail Security for Exchange:

http://www.symantec.com/mail-security-for-microsoft-exchange

Secondly, have you checked these Articles of Symantec Endpoint Protection 12.1:

Creating exceptions for Symantec Endpoint Protection

http://www.symantec.com/docs/HOWTO80919

About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products

http://www.symantec.com/docs/TECH102400

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

Would it be safe to exclude the MS Office directory

--> Though it's not suggested you can exclude but check if you really see any performance improvement. I don't think there would be noticeable change. When we talk about security even though you exclude MS office from scan it doesn't mean SEP will not detect threat if there is any.

If there is any threat inside MS office application SEP will definitely detect.

Do you see any performance issue with scheduled scan or manual scan?

There is one setting which we do recommend to the customer when he face slowness issue with MS office application. Uncheck the option scan when a file is modified.

Scan when a file is backed up_1.JPG

 

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SMLatCST's picture

I'd recommend against excluding the entire Office directory.

As far as other options go, have you considered adding an exception for the .ost extension?  If you do go down this route, I'd recommend you restrict this exception to apply to auto-protect only.  This would then ensure your scheduled scans will still check to make sure the ost files are clean.

In addition, as it's Outlook in particular you're seeing slow performance in, can you confirm if you're using the Outlook scanner component in SEP?  Perhaps you could test disabling it (if you are indeed using SEP Outlook Scanner).

bigdeal's picture

Prove that sep is the culprit. If so, you can add a necessary exclusion.